| ri-inj(ri) ⊦ ri-inj(ri \ ks) |
ri[key] = ri[key0], key ∈ ri, key0 ∈ ri, ∀ key0, key1. key0 ∈ ri ∧ key1 ∈ ri ∧ ri[key0] = ri[key1] → key0 = key1 ⊦ key = key0, key ∈ ks, key0 ∈ ks
Used simplifier rules: ri-inj: ⊦ ri-inj(ri) ↔ (∀ key0, key1. key0 ∈ ri ∧ key1 ∈ ri ∧ ri[key0] = ri[key1] → key0 = key1);% ⊦ ¬ key ∈ ks → (ri \ ks)[key] = ri[key]; (s)% ⊦ key ∈ ri \ ks ↔ key ∈ ri ∧ ¬ key ∈ ks; (ws)